An Adventure Of Link-Local Kind

on YouTube ↗21m

" summary

Describes customizing Kubernetes and Calico to allow using link-local IP addresses for on-premises cluster formation, detailing the code changes made to enable that behavior and how those changes are integrated with Calico. Covers processes for managing internal forks of Kubernetes and Calico (including handling CVEs, upstream security patches, and long-term maintenance) and shares lessons, challenges and a demo of the use case.

AI-written summary · about

" chapters (9)

1. 0:00Intro
2. 0:54WHAT WE DO @ CISCO
3. 1:47AGENDA
4. 2:41Why?
5. 7:29Kubernetes
6. 9:42Calico
7. 12:03How?
8. 14:43Gain v/s Loss
9. 17:44Lessons & What Next?

" related talks

• 32mUsing Open-Source Software to Secure Cloud-Native ApplicationsJoseph Yostos · ContainerDays 2022
• 33mNavigating the Container JungleCasey Davenport · KubeCon + CloudNativeCon North America 2016
• 23mContainer and Kubernetes security policy design: 10 critical best practicesJérémy Guerrand · ContainerDays 2023
• 40mNoverlay Networks for Health and WellbeingKarthik Prabhakar · Virtual Rejekts 2020
• 40mAttacking Kubernetes Clusters Through Your Network PlumbingNir Chako · RSAC 2021
• 35mKlustered: Kubernetes Debugging LiveDavid Flanagan · SREday London 2024
• 32mLaying the Foundation: Real World Kubernetes Deployment PatternsCraig Tracey, Josh Rosso · KubeCon + CloudNativeCon Europe 2019
• 52mImplementing holistic security for containers and KubernetesJan Bruder, Jérémy Guerrand · stackconf 2023